build(deps): bump the cargo-minor-and-patch group across 1 directory with 6 updates

[dependabot]

Bumps the cargo-minor-and-patch group with 6 updates in the / directory:

Package	From	To
http	1.4.2	1.5.0
hyper	1.10.1	1.11.1
ipnet	2.12.0	2.12.2
tokio-rustls	0.26.4	0.26.5
rio-vt	0.5.26	0.5.28
rmcp	3.4.0	3.4.1

Updates http from 1.4.2 to 1.5.0

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

• feat(method): add QUERY method by @​seanmonstar in hyperium/http#798
• fix(uri): allow empty paths in uri::Builder by @​seanmonstar in hyperium/http#853
• perf(header,uri): faster value validation, URI parse/format, map inserts by @​geeknoid in hyperium/http#852
• fix(uri): enforce max length in PathAndQuery by @​seanmonstar in hyperium/http#856

New Contributors

• @​geeknoid made their first contribution in hyperium/http#852

Full Changelog: hyperium/http@v1.4.2...v1.5.0

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

• Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
• Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
• Fix uri::PathAndQuery parsing to enforce URI max length.

Commits

• 16fc9a7 v1.5.0
• e559023 fix(uri): enforce max length in PathAndQuery (#856)
• 2178e17 perf(header,uri): faster value validation, URI parse/format, map inserts (#852)
• 03c8cd7 fix(uri): allow empty paths in uri::Builder (#853)
• bb8705b feat(method): add QUERY method (#798)
• See full diff in compare view

Updates hyper from 1.10.1 to 1.11.1

Release notes

Sourced from hyper's releases.

v1.11.1

Bug Fixes

• http1:
  • detect TE: trailers caselessly and with other values (#4152) (72fcf545)
  • recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)
  • flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)
  • evict pooled conn on request-side Connection: close (#4110) (da19be08)

---

What's Changed

• fix(http1): evict pooled conn on request-side Connection: close by @​samlandfried in hyperium/hyper#4110
• test(http1): rewrite disabled old 0.1-futures conn tests by @​seanmonstar in hyperium/hyper#4138
• Update CONTRIBUTING.md by @​Catwoman08 in hyperium/hyper#4140
• refactor(error/upgrade): move from the use of ref patterns to & and remove allow for lint ref_patterns by @​logan-bobo in hyperium/hyper#4141
• fix(http1): flush bytes buffered by the write re-check before yielding by @​ricochet in hyperium/hyper#4143
• Fix documentation typo by @​latent-9 in hyperium/hyper#4146
• perf(http2): reserve minimal send capacity when piping request bodies by @​sandersaares in hyperium/hyper#4149
• chore(lib): cleanup old commented code by @​dswij in hyperium/hyper#4151
• fix(http1): recognize \n\r\n as a head terminator in the partial-read fast path by @​nam2ee in hyperium/hyper#4147
• docs(body): add streaming read examples by @​fzlzjerry in hyperium/hyper#4148
• fix(http1): detect TE: trailers caselessly and with other values by @​seanmonstar in hyperium/hyper#4152
• fix missing_errors_doc lint by @​CinisBorn in hyperium/hyper#4154
• refactor: drop redundant continue and remove needless_continue allow by @​MsfPablo in hyperium/hyper#4157
• docs: expand crate-level cancel safety section with HTTP/1 vs HTTP/2 by @​MsfPablo in hyperium/hyper#4156
• style(lib): temporarily allow some new clippy lints by @​seanmonstar in hyperium/hyper#4165
• Add an initial COLLABORATORS guide by @​seanmonstar in hyperium/hyper#4158
• clippy: remove lints removed in newer clippy versions by @​tangaac in hyperium/hyper#4167
• Prepare v1.11.1 by @​seanmonstar in hyperium/hyper#4169

New Contributors

• @​samlandfried made their first contribution in hyperium/hyper#4110
• @​Catwoman08 made their first contribution in hyperium/hyper#4140
• @​logan-bobo made their first contribution in hyperium/hyper#4141
• @​ricochet made their first contribution in hyperium/hyper#4143
• @​latent-9 made their first contribution in hyperium/hyper#4146
• @​sandersaares made their first contribution in hyperium/hyper#4149
• @​nam2ee made their first contribution in hyperium/hyper#4147
• @​fzlzjerry made their first contribution in hyperium/hyper#4148
• @​CinisBorn made their first contribution in hyperium/hyper#4154
• @​MsfPablo made their first contribution in hyperium/hyper#4157
• @​tangaac made their first contribution in hyperium/hyper#4167

Full Changelog: hyperium/hyper@v1.11.0...v1.11.1

v1.11.0

Features

• rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.11.1 (2026-08-27)

Bug Fixes

• http1:
  • detect TE: trailers caselessly and with other values (#4152) (72fcf545)
  • recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)
  • flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)
  • evict pooled conn on request-side Connection: close (#4110) (da19be08)

v1.11.0 (2026-07-20)

Bug Fixes

• http1:
  • discard content-length header when received before transfer-encoding (#4124) (540fff91, closes #4123)
  • use append for repeat trailer values in encoder (#4118) (de1483d7)
  • allow up to max_headers trailers (#4108) (f584091a)
  • use append for repeat trailers (#4107) (876effe1)
  • flush buffered data before shutdown (#4018) (72046cc7, closes #4022)
  • more strictly enforce max_buf_size when parsing (#4093) (90ede307, closes #4081)
• http2: avoid buffering Upgraded writes without send capacity (#4102) (aecf5abf)

Features

• rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)

Commits

• 6371cd4 v1.11.1
• 37c9d0c style(lib): remove lints that have been removed in newer clippy (#4167)
• 08a2881 docs(contrib): add initial COLLABORATORS guide (#4158)
• 8b2e533 style(lib): temporarily allow some new clippy lints (#4165)
• 8fcaf1a docs(lib): expand crate-level cancel safety section with HTTP/1 vs HTTP/2 (#4...
• d32b294 style(lib): fix needless_continue lint (#4157)
• fca07bd style(lib): fix missing_errors_doc lint (#4154)
• 72fcf54 fix(http1): detect TE: trailers caselessly and with other values (#4152)
• af432e9 docs(body): add streaming read examples (#4148)
• 3534d75 fix(http1): recognize \n\r\n as a head terminator in the partial-read fast ...
• Additional commits viewable in compare view

Updates ipnet from 2.12.0 to 2.12.2

Release notes

Sourced from ipnet's releases.

Fix issue #70: IpSubnets(0, MAX-1, 0) incorrectly including MAX

• Fixes bug where Ipv4Subnets(0.0.0.0, u32::MAX-1, 0) and Ipv6Subnets(::, u128::MAX-1, 0) incorrectly included u32::MAX and u128::MAX. See issue #70.
• Fixes some typos in documentation and error messages

Changelog

Sourced from ipnet's changelog.

Version 2.12.2

• Fixes bug with IpNet::aggregate() where if a network containing u32::MAX-1 or u128::MAX-1 is provided, then u32::MAX and u128::MAX respectively are always included in the output. See issue #71.

Version 2.12.1

• Fixes bug where Ipv4Subnets(0.0.0.0, u32::MAX-1, 0) and Ipv6Subnets(::, u128::MAX-1, 0) incorrectly included u32::MAX and u128::MAX. See issue #70.
• Fixes some typos in documentation and error messages

Commits

• See full diff in compare view

Updates tokio-rustls from 0.26.4 to 0.26.5

Release notes

Sourced from tokio-rustls's releases.

0.26.5

What's Changed

• Exclude bad test keys from the published package by @​weiznich in rustls/tokio-rustls#140
• chore: improve code comments clarity by @​xibeiyoumian in rustls/tokio-rustls#152
• client/server timeout examples, doc pass hinting towards timeouts. by @​cpu in rustls/tokio-rustls#187
• return more data at once from TlsStream::poll_read by @​trinity-1686a in rustls/tokio-rustls#198

Commits

• f8832d2 Bump version to 0.26.5
• c0fad2f return more data at once from TlsStream::poll_read (#198)
• edc7306 build(deps): bump futures-util from 0.3.33 to 0.3.34
• baeadaa build(deps): bump rcgen from 0.14.8 to 0.14.9
• 1e138ad build(deps): bump taiki-e/cache-cargo-install-action from 3.0.7 to 3.0.8
• b4ecff6 build(deps): bump taiki-e/cache-cargo-install-action from 3 to 3.0.7
• f47a689 build(deps): bump rustls from 0.23.42 to 0.23.43
• e25578e build(deps): bump tokio from 1.53.0 to 1.53.1
• d2a6d98 server: add rustdoc hinting towards timeout wrapping
• c2e9b4a client: add rustdoc hinting towards timeout wrapping
• Additional commits viewable in compare view

Updates rio-vt from 0.5.26 to 0.5.28

Release notes

Sourced from rio-vt's releases.

v0.5.28

Full Changelog: https://rioterm.com/changelog

v0.5.27

No release notes provided.

Commits

• 3762438 prepare v0.5.28
• 48089ea fix: harden PTY quit delivery and lifecycle locking (#1942)
• fb582f0 fix: preserve Unix PTY lifecycle and final output (#1930)
• 510897a Automatic shell integration for zsh, fish and PowerShell (#1923)
• 600bf76 Surface terminal bells on tabs, with a font-free indicator (#1922)
• 7ae0875 terminfo: 256 colors and truecolor caps on xterm-rio (#1925)
• cd64f8b rioterm: render the IME composition inline at the cursor (#1849)
• b7fa423 hoist renders_on_blank onto Style
• 6ceacc7 strip em dash from trim doc
• 541ea05 snapshot trim ignores fg-only blanks, fix stale doc
• Additional commits viewable in compare view

Updates rmcp from 3.4.0 to 3.4.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.4.1

Fixed

• (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.4.1

Fixed

• (transport) fall back after JSON discover rejections (#1288)
• (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

Other

• (deps) update rstest requirement from 0.26.1 to 0.27.0 (#1276)

Commits

• 9427a92 chore: release v3.4.1 (#1294)
• a730321 chore(deps): bump the codeql-action group with 4 updates (#1290)
• fa05883 chore(deps): bump crate-ci/typos from 1.50.1 to 1.50.2 (#1291)
• 5311a0f chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#1292)
• 71e3081 fix(transport): fall back after JSON discover rejections (#1288)
• 16d2186 fix(macros): accept const paths and concat! in tool/prompt descriptions (#1243)
• dbd2382 chore(deps): update rstest requirement from 0.26.1 to 0.27.0 (#1276)
• 9f7ace3 chore(deps): bump the codeql-action group with 4 updates (#1277)
• 011f281 chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#1278)
• 0cfbe7f chore(deps): bump taiki-e/install-action from 2.87.6 to 2.87.12 (#1279)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Tryanks]

Supersedes #541. rio-vt 0.5.28 / teletypewriter 0.5.28 break crates/term, so this branch carries the adaptation commit from #541:

• RioEvent::Title and RioEvent::Bell carry the route id of the raising PTY; a Tcode grid has one PTY, so it is ignored.
• tty::kill_pid is gone. PtyHandle::kill now calls Child::terminate: SIGHUP to the child's process group, SIGKILL after a 1 s grace, then reap. Before, only the shell pid got SIGHUP, so a HUP-trapping shell or its background jobs survived a kill; Windows already hard-kills.
• teletypewriter now launches commands with arguments through the same exec -l login wrapper as a bare shell on macOS; in Tcode only tests spawn commands with arguments.

Checks run locally (macOS arm64): fmt, workspace clippy -D warnings, cargo nextest run --workspace (944 passed, 5 skipped), cargo-machete.